Route Origin Authorization
$ rpki-client -vvf rsync.rp.ki/repo/misakaio/2/AS134575.roa
File: AS134575.roa (raw, json)
Hash identifier: 0VRGsnD/TPpsZQ0iABuLdZJ6U0zSO2mJp0JTRiHXqoY=
Subject key identifier: 7F:AB:82:18:5E:5D:24:FE:70:85:3D:D4:A6:1B:13:83:E3:E0:AA:40
Certificate issuer: /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial: 109E6172F661591BE01078CF63B29578993DF4CA
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access: rsync://rsync.rp.ki/repo/misakaio/2/AS134575.roa
Signing time: Wed 20 Dec 2023 21:30:09 +0000
ROA not before: Wed 20 Dec 2023 21:25:09 +0000
ROA not after: Wed 18 Dec 2024 21:30:09 +0000
asID: 134575
IP address blocks: 2a0b:4340:a1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 May 2024 22:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:9e:61:72:f6:61:59:1b:e0:10:78:cf:63:b2:95:78:99:3d:f4:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
Validity
Not Before: Dec 20 21:25:09 2023 GMT
Not After : Dec 18 21:30:09 2024 GMT
Subject: CN=7FAB82185E5D24FE70853DD4A61B1383E3E0AA40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:22:f8:4c:fd:5a:cc:54:b6:be:d8:f8:9e:05:
1c:ed:ae:06:f2:64:2b:2e:6b:2b:78:76:e5:32:03:
42:77:c3:ba:75:52:06:67:f6:01:fa:85:da:a6:60:
4e:58:3c:50:b9:52:5f:62:07:52:f3:90:78:99:84:
88:de:1d:43:88:e9:8a:1d:6c:d3:be:77:b0:1a:69:
54:95:7e:dc:d8:f9:b3:12:86:47:85:49:56:08:3a:
8d:4a:61:28:a2:56:e7:a8:ba:a3:36:31:13:85:a7:
41:e3:5c:e1:5e:73:82:1c:46:93:36:c8:1c:ce:21:
c0:33:63:01:4b:7c:8c:51:e3:89:fa:5e:43:58:f6:
36:f0:14:9d:23:77:c8:9f:6d:ac:a9:f0:2e:6b:2d:
ac:0f:d2:3d:af:31:0a:bb:47:86:ad:01:69:9f:43:
ca:d5:47:07:ce:2a:7c:dd:94:fb:84:30:3c:c6:79:
9a:84:b2:26:bc:38:12:55:2b:26:56:07:72:a3:16:
f1:41:63:63:14:ea:6e:21:95:c8:7e:28:26:ec:0e:
d6:40:14:cc:c0:83:fc:0b:c0:dd:f6:79:32:ef:57:
b0:43:ea:61:34:b2:21:01:8e:56:b6:5f:91:7f:db:
8e:e0:61:68:b3:a1:cc:f1:05:cb:66:be:ea:1e:5a:
9c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:AB:82:18:5E:5D:24:FE:70:85:3D:D4:A6:1B:13:83:E3:E0:AA:40
X509v3 Authority Key Identifier:
keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/AS134575.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4340:a1::/48
Signature Algorithm: sha256WithRSAEncryption
41:ba:32:0f:b1:5d:cf:76:8d:cd:b8:1d:f3:a0:a7:0c:95:54:
ca:95:c4:52:3d:26:ee:9b:ac:66:8c:dd:2d:b5:db:fc:3d:87:
15:2b:1c:f3:49:d7:f8:ba:cf:be:bb:0a:84:1b:23:b3:e4:3f:
cf:53:a9:08:86:f1:3b:33:54:57:3b:98:8f:7a:72:ad:90:49:
7b:3b:3b:a4:e6:10:3a:89:ea:b2:7b:95:81:4e:ef:37:2b:1e:
51:d0:a2:a8:7c:0b:90:f6:10:32:1c:ce:95:1d:eb:d0:3d:66:
aa:1f:af:1c:88:71:4b:8e:a4:e6:1e:d0:76:f2:11:25:68:8f:
97:ae:54:27:85:9d:f6:e6:05:55:88:2e:4c:b4:3c:1c:a1:f7:
7d:c5:29:e5:ca:70:09:45:84:6a:26:89:b1:44:4e:52:66:2e:
49:0b:7c:d1:3f:78:24:4f:7f:7c:2b:f1:f2:03:61:14:e5:6f:
f8:f4:a5:1a:4d:6a:9e:3a:cd:67:5e:d9:5c:16:a7:1c:67:71:
89:2a:23:ca:0a:89:b7:8b:21:0d:4f:a4:a7:f4:c8:49:6f:88:
0f:60:f3:85:c5:e2:7a:7e:ed:39:bc:e4:58:31:73:e9:bd:71:
38:2c:43:11:a8:89:33:13:b1:02:4c:0a:d0:fb:3a:ab:64:5a:
f3:02:ac:04
-----BEGIN CERTIFICATE-----
MIIEnzCCA4egAwIBAgIUEJ5hcvZhWRvgEHjPY7KVeJk99MowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzU5YTRiNmM2ZDM3MTNjZmYzNjM2MjA3ZGU5ODM5MDU4
YjUxODE1YjAeFw0yMzEyMjAyMTI1MDlaFw0yNDEyMTgyMTMwMDlaMDMxMTAvBgNV
BAMTKDdGQUI4MjE4NUU1RDI0RkU3MDg1M0RENEE2MUIxMzgzRTNFMEFBNDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8IvhM/VrMVLa+2PieBRztrgby
ZCsuayt4duUyA0J3w7p1UgZn9gH6hdqmYE5YPFC5Ul9iB1LzkHiZhIjeHUOI6Yod
bNO+d7AaaVSVftzY+bMShkeFSVYIOo1KYSiiVueouqM2MROFp0HjXOFec4IcRpM2
yBzOIcAzYwFLfIxR44n6XkNY9jbwFJ0jd8ifbayp8C5rLawP0j2vMQq7R4atAWmf
Q8rVRwfOKnzdlPuEMDzGeZqEsia8OBJVKyZWB3KjFvFBY2MU6m4hlch+KCbsDtZA
FMzAg/wLwN32eTLvV7BD6mE0siEBjla2X5F/247gYWizoczxBctmvuoeWpzDAgMB
AAGjggGpMIIBpTAdBgNVHQ4EFgQUf6uCGF5dJP5whT3UphsTg+PgqkAwHwYDVR0j
BBgwFoAUNZpLbG03E8/zY2IH3pg5BYtRgVswDgYDVR0PAQH/BAQDAgeAMGEGA1Ud
HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnN5bmMucnAua2kvcmVwby9taXNha2Fpby8y
LzM1OUE0QjZDNkQzNzEzQ0ZGMzYzNjIwN0RFOTgzOTA1OEI1MTgxNUIuY3JsMGQG
CCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvREVGQVVMVC9OWnBMYkcwM0U4X3pZMklIM3BnNUJZdFJnVnMu
Y2VyMEwGCCsGAQUFBwELBEAwPjA8BggrBgEFBQcwC4YwcnN5bmM6Ly9yc3luYy5y
cC5raS9yZXBvL21pc2FrYWlvLzIvQVMxMzQ1NzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqC0NAAKEw
DQYJKoZIhvcNAQELBQADggEBAEG6Mg+xXc92jc24HfOgpwyVVMqVxFI9Ju6brGaM
3S212/w9hxUrHPNJ1/i6z767CoQbI7PkP89TqQiG8TszVFc7mI96cq2QSXs7O6Tm
EDqJ6rJ7lYFO7zcrHlHQoqh8C5D2EDIczpUd69A9ZqofrxyIcUuOpOYe0HbyESVo
j5euVCeFnfbmBVWILky0PByh933FKeXKcAlFhGomibFETlJmLkkLfNE/eCRPf3wr
8fIDYRTlb/j0pRpNap46zWde2VwWpxxncYkqI8oKibeLIQ1PpKf0yElviA9g84XF
4np+7Tm85Fgxc+m9cTgsQxGoiTMTsQJMCtD7OqtkWvMCrAQ=
-----END CERTIFICATE-----
Generated at Wed May 1 07:17:32 2024 by rpki-client on console-fra.rpki-client.org